mirror of
https://github.com/hardkernel/linux.git
synced 2026-06-07 11:26:02 +09:00
FROMGIT: kasan, vmalloc: unpoison VM_ALLOC pages after mapping
Make KASAN unpoison vmalloc mappings after they have been mapped in when it's possible: for vmalloc() (indentified via VM_ALLOC) and vm_map_ram(). The reasons for this are: - For vmalloc() and vm_map_ram(): pages don't get unpoisoned in case mapping them fails. - For vmalloc(): HW_TAGS KASAN needs pages to be mapped to set tags via kasan_unpoison_vmalloc(). As a part of these changes, the return value of __vmalloc_node_range() is changed to area->addr. This is a non-functional change, as __vmalloc_area_node() returns area->addr anyway. Link: https://lkml.kernel.org/r/fcb98980e6fcd3c4be6acdcb5d6110898ef28548.1643047180.git.andreyknvl@google.com Signed-off-by: Andrey Konovalov <andreyknvl@google.com> Reviewed-by: Alexander Potapenko <glider@google.com> Acked-by: Marco Elver <elver@google.com> Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com> Cc: Catalin Marinas <catalin.marinas@arm.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Evgenii Stepanov <eugenis@google.com> Cc: Mark Rutland <mark.rutland@arm.com> Cc: Peter Collingbourne <pcc@google.com> Cc: Vincenzo Frascino <vincenzo.frascino@arm.com> Cc: Will Deacon <will@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Stephen Rothwell <sfr@canb.auug.org.au> (cherry picked from commit c86dc782f534bf1cf696d63e23993f0d1b0f04f7 git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git akpm) Bug: 217222520 Change-Id: Ib64e9792d266d20350fc9f803376dbe06985c6b0 Signed-off-by: Andrey Konovalov <andreyknvl@google.com>
This commit is contained in:
30
mm/vmalloc.c
30
mm/vmalloc.c
@@ -2210,14 +2210,15 @@ void *vm_map_ram(struct page **pages, unsigned int count, int node)
|
||||
mem = (void *)addr;
|
||||
}
|
||||
|
||||
mem = kasan_unpoison_vmalloc(mem, size);
|
||||
|
||||
if (vmap_pages_range(addr, addr + size, PAGE_KERNEL,
|
||||
pages, PAGE_SHIFT) < 0) {
|
||||
vm_unmap_ram(mem, count);
|
||||
return NULL;
|
||||
}
|
||||
|
||||
/* Mark the pages as accessible, now that they are mapped. */
|
||||
mem = kasan_unpoison_vmalloc(mem, size);
|
||||
|
||||
return mem;
|
||||
}
|
||||
EXPORT_SYMBOL(vm_map_ram);
|
||||
@@ -2438,7 +2439,14 @@ static struct vm_struct *__get_vm_area_node(unsigned long size,
|
||||
|
||||
setup_vmalloc_vm(area, va, flags, caller);
|
||||
|
||||
area->addr = kasan_unpoison_vmalloc(area->addr, requested_size);
|
||||
/*
|
||||
* Mark pages for non-VM_ALLOC mappings as accessible. Do it now as a
|
||||
* best-effort approach, as they can be mapped outside of vmalloc code.
|
||||
* For VM_ALLOC mappings, the pages are marked as accessible after
|
||||
* getting mapped in __vmalloc_node_range().
|
||||
*/
|
||||
if (!(flags & VM_ALLOC))
|
||||
area->addr = kasan_unpoison_vmalloc(area->addr, requested_size);
|
||||
|
||||
return area;
|
||||
}
|
||||
@@ -2986,7 +2994,7 @@ void *__vmalloc_node_range(unsigned long size, unsigned long align,
|
||||
const void *caller)
|
||||
{
|
||||
struct vm_struct *area;
|
||||
void *addr;
|
||||
void *ret;
|
||||
unsigned long real_size = size;
|
||||
unsigned long real_align = align;
|
||||
unsigned int shift = PAGE_SHIFT;
|
||||
@@ -3043,10 +3051,13 @@ again:
|
||||
prot = arch_vmap_pgprot_tagged(prot);
|
||||
|
||||
/* Allocate physical pages and map them into vmalloc space. */
|
||||
addr = __vmalloc_area_node(area, gfp_mask, prot, shift, node);
|
||||
if (!addr)
|
||||
ret = __vmalloc_area_node(area, gfp_mask, prot, shift, node);
|
||||
if (!ret)
|
||||
goto fail;
|
||||
|
||||
/* Mark the pages as accessible, now that they are mapped. */
|
||||
area->addr = kasan_unpoison_vmalloc(area->addr, real_size);
|
||||
|
||||
/*
|
||||
* In this function, newly allocated vm_struct has VM_UNINITIALIZED
|
||||
* flag. It means that vm_struct is not fully initialized.
|
||||
@@ -3058,7 +3069,7 @@ again:
|
||||
if (!(vm_flags & VM_DEFER_KMEMLEAK))
|
||||
kmemleak_vmalloc(area, size, gfp_mask);
|
||||
|
||||
return addr;
|
||||
return area->addr;
|
||||
|
||||
fail:
|
||||
if (shift > PAGE_SHIFT) {
|
||||
@@ -3742,7 +3753,10 @@ retry:
|
||||
}
|
||||
spin_unlock(&vmap_area_lock);
|
||||
|
||||
/* mark allocated areas as accessible */
|
||||
/*
|
||||
* Mark allocated areas as accessible. Do it now as a best-effort
|
||||
* approach, as they can be mapped outside of vmalloc code.
|
||||
*/
|
||||
for (area = 0; area < nr_vms; area++)
|
||||
vms[area]->addr = kasan_unpoison_vmalloc(vms[area]->addr,
|
||||
vms[area]->size);
|
||||
|
||||
Reference in New Issue
Block a user